EP2584539B1 - Method for configuring an electromechanical lock - Google Patents

Description

Technical area

The invention relates to a method for setting up an electromechanical lock.

State of the art

Electromechanical locks exchange data with corresponding keys, either in the lock and / or in the key, the exchanged data are processed to verify authorization of the key. Depending on the result of the check, the lock releases a permission, e.g. access to a place secured by the lock, or the possibility of locking a door.

Electromechanical locks are often realized as so-called wireless locks. These radio locks communicate via a radio link with so-called radio keys and thus enable a non-contact authorization check. The radio key can be a passive transponder, for example, which is held in front of a radio lock and then read out by it. The distance between the radio key and the radio lock is usually only a few cm (about 0 - 50cm). Alternatively, the radio key may have an active transmitter, which sends a signal after actuation of a button, which is received and evaluated by all radio locks in the transmission range of usually a few meters (about 0.5m - 50m). This type is called an active radio key. This system has the advantage that the radio key can be actuated and the radio lock released when approaching the radio lock.

For checking the authorization of electrical keys, such as radio keys, there are a variety of methods, for example, describe the disclosure DE 43 42 641 A1 . DE 199 13 931 and EP 0 671 712 A1 such methods for checking the authorization of keys. Such methods are usually based on whether data stored in the key matches data stored in the lock. At least part of this data is transmitted via a communication protocol between lock and key.

DE 102 37 715 A1 describes a gateway control unit for accessing a vehicle control system. The gateway control unit can receive data from a server via a radio data link and is connected via at least one vehicle bus to a plurality of control devices of the vehicle in order to apply new program codes to the control units via software download or remote flashing. The gateway controller can be freely configured for this. Shortened formulated, the gateway control unit is configured via a radio data link so that the gateway control unit then serves as a programming device for a control unit.

DE 197 01 740 A1 describes a "Keyless Go" locking system for a motor vehicle. The locking system has a key in which a first relatively long code is stored, which is queried by the immobilizer and this switches if necessary free. In addition, this key has a second shorter code that is correspondingly fast to transfer and is requested to unlock the door. The codes are transmitted encrypted as usual. The selection of a corresponding code is made by the respective "lock" and either by a precommand or by the length of a random number transmitted by the lock, which is encrypted by means of the corresponding code and then transmitted back to the lock.

DE 101 38 217 A1 proposes, in a communication between a transponder and a base station, the header of the data packets information about the data transmitted in the middle section of the data packets, eg their identifier to specify.

WO 2010/039598 A2 It is believed that prior art electronic locks communicate with each other over a common network and then be configured over that network. Alternatively, the access control devices can be individually configured directly. These two ways of configuring locks are considered either too hardware-intensive or error-prone. Therefore, it is proposed to visit each lock individually and to bring by a smart card in a learning mode. In the learning mode, the lock communicates with a PDA via a wireless data link. By means of the PDA, the lock is integrated into a closed position and taught accordingly.

EP 1 8035 436 A1 suggests a transponder reader that can handle different protocols to communicate with different transponders. When programming a transponder in a programming mode, these protocols are tried out in order. If a transponder reacts to a specific protocol, then the transponder type and a transponder identification are queried. This is then stored in the transponder reader.

WO 00 55 796 describes very abstractly a communication method between a reference system and a reader. The reference system transmits information to the reading system to optimize the transmission speed.

US 7,075,412 B1 is based on the observation that the protocols for the communication of RFID tags with the corresponding readers are constantly evolving. This requires a regular replacement of the readers. To avoid this, the software is probably adapted as a firmware update to the new RFID tags.

WO 2008/144804 discloses an access control device configured by means of a "Commisioning" card. In this configuration, a device ID and encryption key are transferred from the smart card to the device.

Presentation of the invention

The invention is based on the observation that there are a large number of providers of electromechanical locking systems whose components are not interchangeable or combinable with each other, although they use identically designed remote control keys, which are e.g. come from a common supplier or are standardized. If one has opted for a locking system of a first provider, the locking system type is set and you can not later integrate a lock from another provider in the then existing locking system, i. usually do not share with the already existing keys of the first provider and / or lock and / or add them to existing lock groups.

The invention has for its object to provide a method with which electromechanical locks of different manufacturers can be integrated into a locking system.

This object is achieved by a method according to claim 1. Advantageous embodiments of the invention are specified in the subclaims.

The invention is based on the recognition that a lock of a first manufacturer could theoretically communicate with keys of a locking system from another manufacturer, but that this fails in practice because the manufacturers use different communication protocols. These communication protocols are previously coded in the respective firmware locks and thus after delivery no longer or only with large Effort changeable. On the other hand, the invention is based on the recognition that the communication protocols used can be parameterized between a lock and a key. Therefore, it is sufficient for a lock to transmit the information about the parameters of the communication protocol used within a particular type of locking system so that it can henceforth communicate with these parameters and thus with other components of the corresponding locking system type. A complicated firmware update can therefore be omitted if a lock is to "learn" the communication protocol used in a locking system type.

The method of setting up an electromechanical lock has at least two steps; namely, as a first step, transmitting at least one parameter from a first data carrier to the lock after a first communication protocol, and as a later step determining at least one second communication protocol from the parameter transmitted after the first communication protocol. According to the method, a lock can be adapted, as it were learned, by transmitting information necessary for communication between components of a specific locking system type to this specific locking system. Typical components of a locking system are usually programmable keys and locks and usually also programming devices. It is therefore sufficient to provide a first communication protocol by means of which the parameters of at least one locking system type, that is to say the parameters of a second communication protocol, can be transmitted to the lock and / or at least one key. After the transmission of the parameters of the second communication protocol, the lock can be adapted to a specific locking system type, this can be triggered, for example, by the transmission. Subsequently, the lock can be integrated, for example, in an existing locking system of this type of locking system. The installation of a manufacturer-dependent firmware is not necessary to adapt to the locking system type. First the transmitted parameters ensure that the data transmitted according to the second communication protocol can be correctly interpreted by the lock. In other words, information about the second communication protocol is transmitted in a metalanguage, namely the first communication protocol to the lock, which then determines an object language, namely the second communication protocol, from the information transmitted in the metalanguage. The object language may include communication patterns, eg, the length and structure of frames exchanged according to the second communication protocol, the data rate of the second communication protocol, as well as information about data formats for information to be transmitted according to the second communication protocol, eg date and / or time information or to be used encryption algorithms. A metalanguage in which the second communication protocol can be defined can be, for example, XML or a similar language. The metalanguage can also be used to determine a physical interface, more generally a port of the second communication protocol, for example a specific transmission and / or reception frequency, an antenna or a connection.

Preferably, a communication according to the first communication protocol is handled via the same physical interface or the same port as the communication according to the second communication protocol. As a result, it is sufficient to provide a single interface / port and the hardware costs can be reduced. For example, if the lock is to be integrated into locking systems in which the keys are passive RFID transponders only, then the first communication protocol preferably uses as well as passive RFID transponders the attenuation of an electromagnetic field emitted by the lock to the at least one parameter after the first Transfer communication protocol. For this purpose, the at least one parameter can be stored, for example, in an RFID transponder and transmitted after the first communication protocol. Alternatively, the communication protocols Of course, use different transmission channels (= transmission paths). For example, the second communication protocol may provide for transmission by attenuation of an electromagnetic field emitted by the lock, but the first communication protocol may be transmission by means of a frequency modulated electromagnetic wave or by means of a cable connection.

The method can be used for all communicating components of a locking system, i. not only used for locks. So it is strictly speaking a method for setting up a component of an electromechanical locking system. Only for the sake of clarity, the invention will be explained using the example of a castle.

The component, ie the lock, generates the second communication protocol after transmission of the parameters. it has all the information to exchange data with other components of the locking system type determined by the second communication protocol. Exchanging data may be, for example, performing an authorization query. The result may also be that a key (as a synonym for another component) does not have the necessary authorization.

Preferably, information about the authorization of keys of a particular locking system is transmitted to the lock according to the second communication protocol. This makes it possible to transfer this information with the respective manufacturer-specific tools ("tools"). In this case, a lock would be made with firmware containing the first communication protocol. The lock could then be delivered to a middleman. The intermediate trailer can then transmit the parameters by means of the first communication protocol on the basis of which the lock determines the second communication protocol. This locks the lock to a given type of lock system customized. In the following step, the lock can be integrated into a locking system, for example by transmitting information about authorized keys according to the second communication protocol.

In some types of locking systems, the authorization check is performed such that a secure, i. encrypted data link between the communication partners is established. In this case, so-called crypto-keys are used, which are values to be kept secret, by means of which the data to be transmitted is encrypted and / or decrypted. If the crypto-keys of two communication partners do not match, no secure data link can be established; Nevertheless, the communication partners communicate with each other, because they are able to exchange the data necessary for setting up the secure data link through the second communication protocol. This exchange is also initiated correctly, but the authorization check is aborted because the check of the crypto-keys reveals that they do not match. The cryptokey is not included in most locking systems to the parameters of the locking system type, but most of the encryption algorithm. However, the encryption algorithm can also be specified by a standard and is then preferably stored in the hardware or firmware.

If the crypto-keys match each other, this is usually rated as "basic authorization". For some types of locking equipment, additional data stored in the key and / or lock is compared with each other, eg if the key has authorization for a particular door and / or lock group, if the authorization is temporary, if there are exceptions within a lock group etc. Additional information is usually evaluated before the release of the corresponding lock.

The parameters of the second communication protocol are usually not the information associated with a particular object or building (hereinafter "object-specific information"), such as the lock facility number or membership of a component to a particular lock group, but the information necessary to be object specific To read and / or write information, if authorized. The term parameter in one embodiment of the invention does not necessarily designate the commands available for the communication, it preferably designates at least the information necessary for the assignment of transmitted data to given variables. This is particularly important if, according to a communication protocol, the values of several variables are exchanged one after another as a bit sequence.

As "parameter" is meant any information transmitted from the volume to the lock after the first communication protocol to determine the second communication protocol. By contrast, what is referred to as "data" is all that is transmitted according to the second communication protocol. Each type of memory can be used as a data carrier, from which the at least one parameter of the second communication protocol is transmitted to the lock by means of the first communication protocol. Typical memories are magnetic memories, semiconductor memories and optical memories.

Preferably, the lock communicates by means of the second communication protocol with at least one key. The lock can therefore communicate with appropriate parameters with keys of any locking system type and thus be integrated into this lock system type.

wobei m die Dimension des Vektorraums ist und somit die beim gegebenen Schließanlagentyp maximale Anzahl der verwaltbaren Schließgruppen angibt. Ein binärer Vektor der Länge m wird manchen Schließsystemtypen sowohl auf dem Schlüssel ( γ ) als auch in der Tür (p) gespeichert. Eine Berechtigung eines bestimmten Schlüssels an einer bestimmten Tür kann vorliegen wenn das Skalarprodukt $\overrightarrow{\gamma }\cdot \overrightarrow{\rho }=1.$

Entsprechend wird bei der Berechtigungsprüfung entweder γ oder/oder p und die jeweils andere Komponente übertragen und m kann ein relevanter Parameter sein, um eine einen Vektor γ enthaltende Bitfolge auszuwerten. Entsprechend kann auch die Darstellung von binären Vektoren, wie z.B. der binären Vektoren der Vektorräume T,G,S Parameter des zweiten Kommunikationsprotokolls sein. Bevorzugt wird bei der Übertragung der Parameter ein Header übertragen, der nachfolgende Informationen der Übertragung als Parameter des zweiten Kommunikationsprotokolls kennzeichnet. Dadurch kann das Schloss anhand des Headers unterscheiden, ob eine Kommunikation mit einem Schlüssel erfolgt oder ob es an einen Schließsystemtyp angepasst wird.Preferably, at least the size of the vector spaces of the doors and / or the keys and / or the locking groups is transmitted as at least one parameter. These sizes are often essential to the memory management of the castle and / or the key and for the bit length of the corresponding variables and fields, because in many locking systems in the authorization check the information is exchanged in which locks and / or locking groups of the respective key is authorized. All doors, locking groups and keys of a locking system form the basis for the respective binary vector space T, G or S. Thus, the dimensions of the respective vector spaces T, G, S limit the maximum number of locks, locking groups or locking mechanisms that can be integrated in a locking system of the given locking system type Key. The dimension of the corresponding vector space is information about the storage space required for representing the vectors, which is relevant when extracting such vectors from a bit sequence. For example, the vector space G of the groups can be represented as $$\tilde{\gamma }=\left(\begin{array}{c}{\gamma }_1\\ {\gamma }_2\\ ⋮\hfill \\ {\gamma }_m\end{array}\right);{\gamma }_i\in \left\{0,1\right\}.$$

where m is the dimension of the vector space and thus indicates the maximum number of manageable locking groups in the given locking system type. A binary vector of length m is used on some types of locking systems both on the key ( γ ) and in the door (p). An authorization of a certain key at a certain door may exist if the scalar product $\overrightarrow{\gamma }\cdot \overrightarrow{\rho }=1.$

Accordingly, in the authorization check either γ and / or p and the other component, respectively, and m may be a relevant parameter to represent a vector γ evaluate containing bit sequence. Accordingly, the representation of binary vectors, such as the binary vectors of the vector spaces T, G, S may be parameters of the second communication protocol. In the transmission of the parameters, a header is preferably transmitted which identifies the following information of the transmission as a parameter of the second communication protocol. This can do that Lock based on the header distinguish whether it communicates with a key or whether it is adapted to a locking system type.

Preferably, parameters of the second communication protocol are transmitted in blocks, wherein a specific block section identifies the parameter and at least one further block section identifies the value of the parameter. The block preferably contains an indication of its size. This increases the flexibility of the first communication protocol, and makes it possible to omit unnecessary parameters.

A preferred parameter of a second communication protocol is, e.g. the type of encryption of the lock-to-key communication, or the way in which authorizations are time-limited.

Another preferred parameter is the way of retrieving data from the lock or key. For example, the second communication protocol allow immediate read and / or write access to specific memory areas of the respective communication partner. Then also the jump addresses (pointers) to the corresponding memory locations are preferably parameters of the second communication protocol. In particular, in the transmission of the parameters, the information can be transmitted on how a bit sequence transmitted according to the second communication protocol is to be interpreted. Some types of locking equipment, when checking authorization of a key, read data from standardized memory areas of the key, eg a passive RFID transponder. This data is preferably transmitted as a bit sequence in which values of two or more variables are stored. Subsequently, the values of the individual variables for checking the authorization, such as a locking group number, a door number, etc., are extracted from the bit sequence. The information about the positions of the values of Variables in the bit sequence are preferably transmitted after the first communication protocol.

Preferably, at least one parameter in the lock has a standard value (default value) which can be replaced by another value when transmitting the information. As a result, the amount of information to be transmitted can be reduced and there can be a "default protocol". It is then sufficient to transmit the deviations of the second communication protocol to the lock.

Preferably, at least one piece of information is transmitted which represents the data format of the data stored or to be stored on the key and / or the lock. For example, data can be stored in compressed form and / or transferred. Then also the information would be if and if so which compression method application is a preferably transmitted parameter of the second communication protocol.

Preferably, at least one piece of information is transmitted, which stands for at least one memory address in at least one key, from which data is read to check the authorization of the key. For example, an entry address for reading a crypto-key can be transmitted.

Preferably, at least one parameter is transmitted, by means of which an encryption method for protecting data transmitted according to the second communication protocol is selected. Then the lock can be used in locking systems with various encryption methods.

Likewise, the information about a particular locking system type can be transmitted to the lock as a parameter. In this case is on the lock for at least one locking system type a corresponding parameter set stored. The transmission of only one locking system type can be done much faster than the transmission of a whole parameter set. As a result, the time to learn the lock can be significantly shortened.

The information is preferably transmitted via the same interface from the data carrier, via which the communication with the keys is also carried out later. This avoids additional interfaces and thus costs. For example, it may be sufficient to hold a first RFID transponder with the parameters in front of a lock, so that the first RFID transponder and the lock can communicate so as to provide the parameters for later communication with the keys, which are also RFID transponders to hand over. Then, the communication with the first RFID transponder via the first communication protocol and the communication with the other RFID transponders according to the second communication protocol.

During transmission, information about at least two communication protocols is preferably transferred. Then a lock can be involved simultaneously in two or more locking systems of different types. For example, it may then first attempt communication with a key after a first second communication protocol, and if this fails, begin communication for at least one further second communication protocol.

The invention has been described with reference to a lock to be fitted in a locking system. However, electronic locks and keys - apart from their mechanical components - are basically interchangeable. Therefore, in the same way a key can be adapted to a given type of locking system. The same applies to every other component a locking system that communicates with a key or a lock.

After the invention, no new firmware is loaded on the lock. The program code of the firmware is transmitted by means of the at least one parameter transmitted after the first communication protocol, the information for determining the subsequently to be used second communication protocol. The firmware is usually located in a program memory. The at least one parameter is preferably not loaded into the program memory but into a data memory.

After the second communication protocol has been determined, a preferred permanent flag is set which prevents a change of the second communication protocol. This increases the security against manipulation of the lock.

Description of the drawings

The invention will now be described by way of example with reference to exemplary embodiments with reference to the single drawing.

In the method in FIG. 1 communicates a component of an electromechanical locking system, such as an electromechanical lock 10 with a disk 20 for a given, ie the lock 10 and the disk 20 known first communication protocol. The data carrier 20 may be, for example, the RFID transponder card shown. The lock 10 is shown here by way of example as a knob cylinder. For communication, an encrypted data link 30 is first established between the lock 10 and the data carrier 20, and then a header 31 is transmitted from the data carrier 10 to the lock 20. Based on the header 31 detects the lock whether or not subsequently parameter 33 of a second communication protocol associated with a particular lock type is transmitted. If, as indicated, parameter 33 is to be transmitted, it goes into a "learning mode", which is indicated by an arrow 32. In the learning mode, a second communication protocol is parameterized on the basis of the transmitted parameters 33. Now, the lock can be inserted into a concrete locking system, for example, in which he tells him a lock ID 34, and / or a group ID 35 and / or encryption parameters 36 of the specific locking system. This can then be done using the second communication protocol, for example by means of a separate data carrier 22, a configuration unit (not shown) or a control center of the locking system (not shown). The lock 10 now has all the information it needs to check the authorization 37 of a key 24 of the locking systems.

Other possibilities to initiate the learning mode are possible. For example, a file with a predetermined file name containing the at least one parameter can be stored on a data medium. The lock asks the disk if it has a file with the specific name. If so, it goes into the learning mode, the reads the at least one parameter from the data medium, for example from the file, and determines the second communication protocol based on the at least one parameter. Preferably, subsequently, a flag, eg a bit, is set which prevents the learning mode from being called again. For this, the lock preferably polls the flag, and only checks if it should go into the learning mode or not, if the flag is not set. The flag may be checked at any time prior to the configuration of the second communication protocol. The purpose of the query of the flag is to prevent a once defined second communication protocol is replaced by a new second communication protocol to prevent tampering.

LIST OF REFERENCE NUMBERS

10

lock

20

Disk / RFID card

24

key

30

encrypted data link

31

Header

32

learning mode

33

parameter

34

Castle ID

35

Group ID

36

encryption parameters

37

authorization

Claims (14)

1. Method for commissioning a component of an electromechanical locking system, comprising at least the steps of:

   - transmitting at least one parameter from a first data carrier to the component according to a first communication protocol,

   - after transmission, based on the parameter/s transmitted according to the first communication protocol, generating at least one second communication protocol by means of the component, by parameterizing the second communication protocol based on the transmitted parameters,

   - after generating, setting a flag in the component, wherein the component prevents a repeated change of the second communication protocol when the flag is set,

   - after generating, inserting the component into the electromechanical locking system, in that a lock-ID (34) and/or a group-ID (35) and/or encryption parameter (36) are/is communicated to the component by means of the second communication protocol, and

   - exchanging data with other components of the locking system by means of the second communication protocol.
2. Method according to claim 1,
   characterized in that
   the component is a lock, and that the lock is integrated into a locking system by transmitting information to the lock about authorized keys according to the second communication protocol.
3. Method according to claim 1 or 2,
   characterized in that
   at least the position of at least one value of at least one variable in a bit sequence is transmitted as parameter (33), wherein the bit sequence is exchanged according to the second communication protocol.
4. Method according to one of the preceding claims,
   characterized in that
   the component (10) communicates with at least one key (24) by means of the second communication protocol.
5. Method according to one of the preceding claims,
   characterized in that
   information about the authorization of keys (24) of a specific locking system is transmitted to a lock (10) according to the second communication protocol.
6. Method according to one of the preceding claims,
   characterized in that
   at least the size of the vector spaces of the doors and/or of the keys (24) and/or of the locking groups are transmitted as parameter (33).
7. Method according to one of the preceding claims,
   characterized in that
   when transmitting by means of the first communication protocol, a header (31) is transmitted before the parameter, which header designates the subsequent information as parameter (33) of the second communication protocol.
8. Method according to one of the preceding claims,
   characterized in that
   the parameter (33) are transmitted in blocks, wherein a specific block section identifies the parameter (33), and at least another block section identifies the value of the parameter (33).
9. Method according to one of the preceding claims,
   characterized in that
   at least one parameter (33) is transmitted that stands for the data format of the data stored or data to be stored on the key (24) and/or the lock (10).
10. Method according to one of the preceding claims,
    characterized in that
    at least one parameter (33) is transmitted that stands for at least one memory address in at least one key (24) from which memory adress data is read for checking authorization of the key (24).
11. Method according to one of the preceding claims,
    characterized in that
    at least one parameter (33) is transmitted, on the basis of which an encryption method is selected for protecting data transmitted according to the second communication protocol data.
12. Method according to one of the preceding claims,
    characterized in that
    the information about the assignmet of the lock (10) to a specific locking system is transmitted.
13. Method according to one of the preceding claims,
    characterized in that
    at least one parameter is transmitted, by which a data format for storage and/or transmission of a date designation and/or time designation and/or an authorization period is determined.
14. Method according to one of the preceding claims,
    characterized in that
    the transmission of the at least one parameter is conducted via a first physical interface, and that the transmission of data according to the second communication protocol is conducted via the same physical interface.

Images